Add email and password validation.

more elegant error handling (i think) than first pass.